Physical Security

Physical security is simple: Lock the door. Limit who has physical access to the computer equipment to prevent theft or vandalism. In addition, limit access to the system console. Anyone who has access to the console ultimately has access to the data. If the computer contains sensitive data, keep it locked in a controlled environment with clean power and adequate protection against fire, lightning, flood, and other building disasters. Restrict access to protect against tampering with the system and its backups. Anyone with access to the backup media could steal it and access the data. Furthermore, if a system is logged in and left unattended, anyone who can use that system can gain access to the operating system and the network. Make sure your users log out or “lock” their screens before walking away. In summary, you need to be aware of your users’ computer surroundings, and you need to physically protect them from unauthorized access.